[Hamlib-stationserver] Access Control (was Re: Updated Requirements Doc)

[Art B. <ac...@in...>]

On Mar 6, 2014, at 8:21 AM, Nate Bargmann <n0...@n0...> wrote:
> Perhaps it is my inexperience of working with these security blocks that
> forms my thoughts.  I'm not sure that Station Server should be concerned
> with handling those protocols internally.  

OK, so how about if we:

* Chang F-1 to read "... in response to queries from the client application(s) over a single IP-based Local Area Network."

* Change F-2 to read "...to the client(s) both spontaneously and in response to queries from the client over a single IP-based Local Area Network."  

* Change F-3 to read, "...over a single IP-based Local Area Network." 

* Change F-4 to read "Enable the user to change settings and activate functions of connected radios and ancillary devices.";

* Trim F-6 to just say "Support multiple simultaneous client connections." (dropping the whole business of different user identities and access privileges);

* Drop F-7 entirely (no authentication or user identities);

* Drop N-3 entirely (no encryption); and,

* Add a note stating that "Users in order to maintain the required control of Amateur Radio stations by a licensed operator, remote StationServer conenctions across multiple networks or the Internet should be implemented using a Virtual Private Network or some other scheme for encryption and secure routing."

- Art KD6O